152 matches found
CVE-2024-29050
CVE-2024-29050 CVE-2024-29050는 Windows 암호화 서비스, 특히 암호화 작업 중 인증서가 처리되는 방식의 보안 취약점입니다. 이 문제는 파일 크기나 버퍼 길이와 같은 데이터에 대한 계산이 변수의 허용 가능한 한계를 초과하여 시스템이 메모리를 잘못 계산하거나 잘못 관리하게 되는 정수 오버플로우에서 비롯됩니다. 이 경우 암호화 함수가 특정 인증서 데이터를 잘못 처리하여 부적절한 메모리 관리가 발생합니다. 공격자는 특수하게 조작된 입력예: 과도하게 큰 인증서나 조작된 데이터 필드을 시스템에 제공하여 시스템...
Vulnerability of the Cryptographic Operating System Services in Windows, allowing attackers to disclose protected information
The vulnerability of the Windows Cryptographic Operating System services is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
EUVD-2026-44138
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
EUVD-2026-43936
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
EUVD-2026-43848
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-43789
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...
CVE-2026-50681
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
CVE-2026-50352
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
CVE-2026-50302
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-44806
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...
CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability
...
CVE-2026-50302
CVE-2026-50302 is a Windows Cryptographic Services security feature bypass caused by improper certificate validation, allowing a network-based attacker to bypass a security feature. The CVSS v3.1 base score is 4.2 (Medium) with network attack vector and user interaction required. Microsoft and se...
CVE-2026-50302 Windows Cryptographic Services Security Feature Bypass Vulnerability
...
CVE-2026-44806
CVE-2026-44806 : Windows Cryptographic Services vulnerability causing denial of service over the network due to missing release of memory after its effective lifetime. Affected component: Windows Cryptographic Services. Root cause described as missing memory release, leading to potential DoS. Rem...
Windows Cryptographic Services Security Feature Bypass Vulnerability
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...
Windows Cryptographic Services Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
PT-2026-58302
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. This issue enables remote attackers to skip the...
CVE-2026-50302: Improper Certificate Validation
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-44806: Missing Release of Memory after Effective Lifetime
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...
CVE-2026-50681: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...